Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/CxWx_aO3alHDJyRBQEvpyYw9YQ8.mft
File: CxWx_aO3alHDJyRBQEvpyYw9YQ8.mft (raw, json)
Hash identifier: H+W1953zZ542yHa2du6duYJc/gOK4fze8dZHImltSqU=
Subject key identifier: 8C:48:D3:7C:94:12:C8:FB:21:92:9F:9D:1B:21:EF:56:8D:DA:6D:8E
Authority key identifier: 0B:15:B1:FD:A3:B7:6A:51:C3:27:24:41:40:4B:E9:C9:8C:3D:61:0F
Certificate issuer: /CN=A91209D3/serialNumber=0B15B1FDA3B76A51C3272441404BE9C98C3D610F
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxWx_aO3alHDJyRBQEvpyYw9YQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/CxWx_aO3alHDJyRBQEvpyYw9YQ8.mft
Manifest number: DD
Signing time: Thu 01 Feb 2024 05:23:41 +0000
Manifest this update: Thu 01 Feb 2024 05:23:41 +0000
Manifest next update: Thu 08 Feb 2024 05:23:41 +0000
Files and hashes: 1: CxWx_aO3alHDJyRBQEvpyYw9YQ8.crl (hash: 4s2m0hoJDGBTfwm4EKEnj4dNgwl4rRm5aLZnoDzzU54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209D3/serialNumber=0B15B1FDA3B76A51C3272441404BE9C98C3D610F
Validity
Not Before: Feb 1 05:23:41 2024 GMT
Not After : Feb 8 05:23:41 2024 GMT
Subject: CN=65bb2add-8510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:a6:6f:88:2c:41:01:c5:0f:23:6f:18:c0:
c5:9f:36:79:81:b3:a1:58:6e:f1:fc:b4:34:33:03:
18:16:fe:ca:9a:e1:c3:0c:28:71:33:cd:a7:e4:4d:
df:a6:5c:d0:5b:78:72:63:20:cb:0b:a4:d1:da:2a:
a4:e8:bd:ce:c2:88:22:b1:93:b1:a0:1c:93:94:8b:
1c:f9:93:a1:6f:9f:55:8c:c6:bd:99:e8:8a:5d:74:
23:e8:55:4b:a1:80:e5:3f:dd:31:7a:29:51:cc:cf:
79:7d:3a:fb:7c:0f:e9:fa:32:60:85:47:59:58:89:
dd:c1:8e:9e:bc:5f:7e:9c:0d:d3:d5:e6:ce:24:65:
61:b7:92:a6:c3:7f:b5:ef:a8:ac:95:d9:ca:0f:db:
93:ad:3c:4b:c1:9f:a0:22:29:70:9b:9f:63:0d:1c:
6b:be:58:74:92:dc:52:80:0e:f7:7c:a0:17:c6:49:
5e:65:8f:85:c6:1a:20:ca:25:1c:c1:e4:09:53:db:
9a:a5:ef:49:d4:14:15:76:5c:dc:fb:7c:f3:a2:7a:
5e:14:49:bd:c2:bd:98:e3:6f:f1:1c:92:9c:95:5b:
42:f4:de:8e:88:ea:0e:1e:b8:3a:2e:80:a8:26:b4:
4d:44:d4:55:31:ee:97:b4:46:ed:9f:24:96:da:3c:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:D3:7C:94:12:C8:FB:21:92:9F:9D:1B:21:EF:56:8D:DA:6D:8E
X509v3 Authority Key Identifier:
keyid:0B:15:B1:FD:A3:B7:6A:51:C3:27:24:41:40:4B:E9:C9:8C:3D:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/CxWx_aO3alHDJyRBQEvpyYw9YQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxWx_aO3alHDJyRBQEvpyYw9YQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/CxWx_aO3alHDJyRBQEvpyYw9YQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3b:c5:2a:a9:d2:9f:ff:87:93:2e:7c:e5:2a:65:55:83:3a:
eb:51:9a:50:fb:71:f6:07:49:ac:8f:d3:08:63:4b:52:00:2e:
25:9d:f2:47:9e:2f:60:90:cc:97:09:ea:d4:00:ac:bc:a9:53:
1a:3f:fd:97:68:8e:a3:a0:ee:52:a0:c4:0b:29:89:d2:dc:b7:
ca:85:0b:54:35:2b:0c:32:14:3d:0c:d5:e5:17:68:ac:8b:49:
a1:7c:3b:9c:d6:72:7a:1b:57:83:a0:99:88:cf:ce:a3:92:6b:
fe:3f:83:69:2d:26:ae:11:6b:31:35:94:4d:5b:96:88:ff:9d:
cc:a7:55:2b:76:3f:b4:d3:06:cf:30:91:9c:7d:0e:dd:e0:58:
c9:c7:87:c5:fe:a9:fb:cd:b1:aa:0b:89:16:1d:dd:7f:3b:04:
7f:54:27:08:79:71:b9:17:fa:ff:33:29:69:ee:4d:e0:c9:dc:
8a:99:7b:a9:2f:62:30:23:b6:af:c7:29:b4:8c:a4:a6:29:b9:
ea:6d:46:e7:cc:28:f2:27:b9:b7:a5:9f:fe:0d:97:f6:d8:eb:
13:e2:d5:1c:93:2b:a1:6b:80:6c:ec:a2:0a:5b:c6:3e:bf:2d:
c0:7c:64:e9:bc:15:ad:2b:0a:2c:6c:2a:c6:f5:4a:db:14:69:
9d:54:36:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5RDMxMTAvBgNVBAUTKDBCMTVCMUZEQTNCNzZBNTFDMzI3MjQ0MTQwNEJFOUM5
OEMzRDYxMEYwHhcNMjQwMjAxMDUyMzQxWhcNMjQwMjA4MDUyMzQxWjAYMRYwFAYD
VQQDEw02NWJiMmFkZC04NTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzL2mb4gsQQHFDyNvGMDFnzZ5gbOhWG7x/LQ0MwMYFv7KmuHDDChxM82n5E3f
plzQW3hyYyDLC6TR2iqk6L3OwogisZOxoByTlIsc+ZOhb59VjMa9meiKXXQj6FVL
oYDlP90xeilRzM95fTr7fA/p+jJghUdZWIndwY6evF9+nA3T1ebOJGVht5Kmw3+1
76isldnKD9uTrTxLwZ+gIilwm59jDRxrvlh0ktxSgA73fKAXxkleZY+FxhogyiUc
weQJU9uape9J1BQVdlzc+3zzonpeFEm9wr2Y42/xHJKclVtC9N6OiOoOHrg6LoCo
JrRNRNRVMe6XtEbtnySW2jxHZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxI03yU
Esj7IZKfnRsh71aN2m2OMB8GA1UdIwQYMBaAFAsVsf2jt2pRwyckQUBL6cmMPWEP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDlEMy82NTQwQzk1QTcy
NDgxMUVEQjIyNjA0NzdDNEY5QUUwMi9DeFd4X2FPM2FsSERKeVJCUUV2cHlZdzlZ
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N4V3hfYU8zYWxIREp5UkJRRXZweVl3OVlROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDlEMy82NTQwQzk1QTcyNDgxMUVEQjIyNjA0NzdDNEY5QUUwMi9DeFd4X2FPM2Fs
SERKeVJCUUV2cHlZdzlZUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKO8UqqdKf/4eTLnzlKmVVgzrrUZpQ+3H2B0msj9MIY0tSAC4lnfJH
ni9gkMyXCerUAKy8qVMaP/2XaI6joO5SoMQLKYnS3LfKhQtUNSsMMhQ9DNXlF2is
i0mhfDuc1nJ6G1eDoJmIz86jkmv+P4NpLSauEWsxNZRNW5aI/53Mp1Urdj+00wbP
MJGcfQ7d4FjJx4fF/qn7zbGqC4kWHd1/OwR/VCcIeXG5F/r/Mylp7k3gydyKmXup
L2IwI7avxym0jKSmKbnqbUbnzCjyJ7m3pZ/+DZf22OsT4tUckyuha4Bs7KIKW8Y+
vy3AfGTpvBWtKwosbCrG9UrbFGmdVDY/
-----END CERTIFICATE-----
Generated at Thu Feb 1 19:04:37 2024 by rpki-client on console-fra.rpki-client.org